$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft File: QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft (raw, json) Hash identifier: Y3k2+pER81qN6SqtGufrYPSDeLS464SZcon/aepq1Vg= Subject key identifier: 73:1D:29:57:DA:D0:85:2C:3F:27:75:60:04:C2:58:E2:2F:8C:44:4E Authority key identifier: 40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79 Certificate issuer: /CN=A9157D7A/serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379 Certificate serial: 07DB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft Manifest number: 0745 Signing time: Sun 19 Oct 2025 00:04:23 +0000 Manifest this update: Sun 19 Oct 2025 00:04:22 +0000 Manifest next update: Sun 26 Oct 2025 00:04:22 +0000 Files and hashes: 1: QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl (hash: uDM3fQ5MEbelTCS6bZNAES92dlpojYQiNjAkCXIUsEw=) 2: 632982C478E411F0B36C2173C4F9AE02.roa (hash: DqMi1I/Izzb5oOVCjzKuAyd4KmWH/EJc0rOqPfPKcVQ=) 3: 2E96A63A690A11EF9525E980C4F9AE02.roa (hash: n+cZOeCarx5jNko9dz4X4vMi8IAEqtDVRtDk4yCyv7k=) 4: 324F926C3BAC11F09BF98E0EC4F9AE02.roa (hash: pdIAmEXGHFqCecA3UWlLXgTA3Tmjugj3Oz1gOaklUnk=) 5: C186DD80331A11EC8F33C209C4F9AE02.roa (hash: 4LAsvPxFJVP/38iRypn40TaMOPz9lx58IyU7j8BYYnw=) 6: 03BA8B36824411EF94479387C4F9AE02.roa (hash: J+iY4JEtmySFwOCqaP72SvJVDZLPvNEiLKvI7NyNzmE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:04:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2011 (0x7db) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157D7A, serialNumber=401B429906C90EA03ECFC61B15BA4EF123903379 Validity Not Before: Oct 19 00:04:22 2025 GMT Not After : Oct 26 00:04:22 2025 GMT Subject: CN=68f42b06-94b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b9:0e:3f:8f:06:e3:57:75:68:85:dd:9f:39: 43:5b:fe:20:34:3a:5c:e8:1e:f0:41:ee:d1:f2:fb: 31:89:ee:6e:e8:fe:b3:1b:01:1d:8d:d9:c8:4c:e8: c7:60:39:6c:45:1d:8b:44:0a:ec:17:5e:35:88:15: 5a:5e:41:bf:43:44:70:1f:67:7c:16:f0:0c:4e:c5: 29:6b:12:7e:4f:d2:d3:1a:ec:19:d4:89:b4:e3:f7: df:f7:fe:89:e3:89:b6:2e:ca:e6:25:70:7b:69:90: d9:fb:73:95:1e:b1:4d:49:4b:38:d3:b3:b5:18:e6: e1:64:6c:31:a8:49:1d:83:c2:43:a2:57:8d:f1:5d: 95:02:55:b0:f5:74:25:8b:7c:c2:fc:af:f6:c7:c4: ee:1a:77:19:0e:b5:a1:36:67:54:dc:90:05:2e:2b: c8:c4:00:84:aa:94:b9:4b:91:45:61:5f:4a:80:29: 31:f4:77:2b:89:34:c8:f7:af:75:48:41:0f:f1:4d: f6:2b:c4:ec:58:ef:44:2c:e3:2e:10:b5:0c:15:6e: 65:39:2b:78:07:c5:90:7b:87:e9:3e:34:59:e9:b9: 49:f3:50:65:a5:6a:93:59:c1:d9:07:33:ba:aa:10: 3a:f2:97:ce:64:0b:45:1f:81:8b:07:58:c8:f4:63: 12:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:1D:29:57:DA:D0:85:2C:3F:27:75:60:04:C2:58:E2:2F:8C:44:4E X509v3 Authority Key Identifier: keyid:40:1B:42:99:06:C9:0E:A0:3E:CF:C6:1B:15:BA:4E:F1:23:90:33:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QBtCmQbJDqA-z8YbFbpO8SOQM3k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D7A/5DDCCCC6991511EB96727243C4F9AE02/QBtCmQbJDqA-z8YbFbpO8SOQM3k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:cd:8e:fd:15:8a:f1:ba:76:e7:79:d2:d0:ea:0a:03:6e:6b: 53:ae:8f:7f:4c:29:06:ef:e3:e5:e2:a2:fa:c1:1f:51:c5:89: 2c:54:b9:42:33:8f:d7:b2:35:e7:ee:d6:9a:09:18:af:d9:11: 08:74:af:fb:2f:27:99:94:6d:e5:69:17:b7:69:64:52:7d:85: 29:93:b4:44:bd:97:2d:eb:67:4a:11:d6:ec:75:d4:6c:6c:05: af:a8:7e:3c:d5:b6:52:47:22:0a:2f:d2:09:76:b2:5e:c4:7a: 50:be:2c:5d:be:62:40:04:04:ee:53:1e:60:3f:4b:c3:05:3e: ee:38:39:33:b5:ea:61:d7:dc:c9:cb:8c:d4:d9:a1:2a:a1:96: 55:6d:7c:6f:9e:6e:84:08:9f:03:9e:c1:f7:22:0b:c8:ad:aa: 1f:d1:93:c3:d2:6b:b8:0f:21:7e:dd:c8:d4:3d:b8:27:fa:f6: c4:24:9f:72:33:68:db:e9:31:18:1b:a0:70:78:48:7f:29:c2: f5:61:59:03:b2:fe:3d:d1:82:0e:06:09:7c:69:c7:55:2b:92: b9:cc:6b:4d:75:67:91:6e:f2:89:26:96:7b:77:89:2c:89:c9: 9f:33:10:f4:a3:99:c4:ad:35:cd:14:8f:73:f8:95:41:d0:ea: d7:fd:19:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdEN0ExMTAvBgNVBAUTKDQwMUI0Mjk5MDZDOTBFQTAzRUNGQzYxQjE1QkE0RUYx MjM5MDMzNzkwHhcNMjUxMDE5MDAwNDIyWhcNMjUxMDI2MDAwNDIyWjAYMRYwFAYD VQQDEw02OGY0MmIwNi05NGI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2rkOP48G41d1aIXdnzlDW/4gNDpc6B7wQe7R8vsxie5u6P6zGwEdjdnITOjH YDlsRR2LRArsF141iBVaXkG/Q0RwH2d8FvAMTsUpaxJ+T9LTGuwZ1Im04/ff9/6J 44m2LsrmJXB7aZDZ+3OVHrFNSUs407O1GObhZGwxqEkdg8JDoleN8V2VAlWw9XQl i3zC/K/2x8TuGncZDrWhNmdU3JAFLivIxACEqpS5S5FFYV9KgCkx9HcriTTI9691 SEEP8U32K8TsWO9ELOMuELUMFW5lOSt4B8WQe4fpPjRZ6blJ81BlpWqTWcHZBzO6 qhA68pfOZAtFH4GLB1jI9GMS+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHMdKVfa 0IUsPyd1YATCWOIvjEROMB8GA1UdIwQYMBaAFEAbQpkGyQ6gPs/GGxW6TvEjkDN5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q3QS81RERDQ0NDNjk5 MTUxMUVCOTY3MjcyNDNDNEY5QUUwMi9RQnRDbVFiSkRxQS16OFliRmJwTzhTT1FN M2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FCdENtUWJKRHFBLXo4WWJGYnBPOFNPUU0zay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0Q3QS81RERDQ0NDNjk5MTUxMUVCOTY3MjcyNDNDNEY5QUUwMi9RQnRDbVFiSkRx QS16OFliRmJwTzhTT1FNM2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzzY79FYrxunbnedLQ6goDbmtTro9/TCkG7+Pl4qL6wR9RxYksVLlC M4/XsjXn7taaCRiv2REIdK/7LyeZlG3laRe3aWRSfYUpk7REvZct62dKEdbsddRs bAWvqH481bZSRyIKL9IJdrJexHpQvixdvmJABATuUx5gP0vDBT7uODkzteph19zJ y4zU2aEqoZZVbXxvnm6ECJ8DnsH3IgvIraof0ZPD0mu4DyF+3cjUPbgn+vbEJJ9y M2jb6TEYG6BweEh/KcL1YVkDsv490YIOBgl8acdVK5K5zGtNdWeRbvKJJpZ7d4ks icmfMxD0o5nErTXNFI9z+JVB0OrX/Rl6 -----END CERTIFICATE-----Generated at Mon Oct 20 11:36:48 2025 by rpki-client